NetSight
high7.4

CVE-2018-21096

Certain NETGEAR devices are affected by CSRF.

Impact

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.

Affected products

VendorProductAffected versions
NetgearWac120 Firmware
before 2.1.7
NetgearWac505 Firmware
before 5.0.5.4
NetgearWac510 Firmware
before 5.0.5.4
NetgearWnap320 Firmware
before 3.7.11.4
NetgearWnap210 Firmware
before 3.7.11.4
NetgearWndap350 Firmware
before 3.7.11.4
NetgearWndap360 Firmware
before 3.7.11.4
NetgearWndap660 Firmware
before 3.7.11.4
NetgearWndap620 Firmware
before 2.1.7
NetgearWnd930 Firmware
before 2.1.5
NetgearWn604 Firmware
before 3.3.10

Weakness classification

References